Package org.openremote.manager.mqtt

Class ActiveMQORSecurityManager

java.lang.Object

org.apache.activemq.artemis.spi.core.security.ActiveMQJAASSecurityManager

org.openremote.manager.mqtt.ActiveMQORSecurityManager

All Implemented Interfaces:

org.apache.activemq.artemis.spi.core.security.ActiveMQSecurityManager, org.apache.activemq.artemis.spi.core.security.ActiveMQSecurityManager5

public class ActiveMQORSecurityManager
extends org.apache.activemq.artemis.spi.core.security.ActiveMQJAASSecurityManager

A security manager that uses the MultiTenantJaasCallbackHandler with a dynamic KeycloakDeployment resolver. Unfortunately lots of private methods and fields in super class.

Field Summary

Fields

Modifier and Type	Field	Description
protected AuthorisationService	authorisationService
protected MQTTBrokerService	brokerService
protected org.apache.activemq.artemis.core.config.impl.SecurityConfiguration	certificateConfig
protected String	certificateConfigName
protected org.apache.activemq.artemis.core.config.impl.SecurityConfiguration	config
protected String	configName
protected Function<String,org.keycloak.adapters.KeycloakDeployment>	deploymentResolver
protected org.apache.activemq.artemis.core.server.ActiveMQServer	server

Constructor Summary

Constructors

Constructor	Description
ActiveMQORSecurityManager(AuthorisationService authorisationService, MQTTBrokerService brokerService, Function<String,org.keycloak.adapters.KeycloakDeployment> deploymentResolver, String configurationName, org.apache.activemq.artemis.core.config.impl.SecurityConfiguration configuration)

Method Summary

Modifier and Type	Method	Description
Subject	authenticate(String user, String password, org.apache.activemq.artemis.spi.core.protocol.RemotingConnection remotingConnection, String securityDomain)
boolean	authorize(Subject subject, Set<org.apache.activemq.artemis.core.security.Role> roles, org.apache.activemq.artemis.core.security.CheckType checkType, String address)
protected Subject	getAuthenticatedSubject(String user, String password, org.apache.activemq.artemis.spi.core.protocol.RemotingConnection remotingConnection, String securityDomain)
protected boolean	verifyRights(Subject subject, String address, boolean isWrite)

Methods inherited from class org.apache.activemq.artemis.spi.core.security.ActiveMQJAASSecurityManager

getCertificateConfiguration, getConfiguration, getDomain, getRolePrincipalClass, getUserFromSubject, getUserPrincipalClass, setCertificateConfiguration, setCertificateConfigurationName, setConfiguration, setConfigurationName, setRolePrincipalClass, setUserPrincipalClass, validateUser, validateUserAndRole

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.apache.activemq.artemis.spi.core.security.ActiveMQSecurityManager

init

Field Details

authorisationService

protected AuthorisationService authorisationService

brokerService

protected MQTTBrokerService brokerService

deploymentResolver

protected Function<String,org.keycloak.adapters.KeycloakDeployment> deploymentResolver

certificateConfigName

protected String certificateConfigName

configName

protected String configName

config

protected org.apache.activemq.artemis.core.config.impl.SecurityConfiguration config

certificateConfig

protected org.apache.activemq.artemis.core.config.impl.SecurityConfiguration certificateConfig

server

protected org.apache.activemq.artemis.core.server.ActiveMQServer server

Constructor Details

ActiveMQORSecurityManager

public ActiveMQORSecurityManager(AuthorisationService authorisationService,
 MQTTBrokerService brokerService,
 Function<String,org.keycloak.adapters.KeycloakDeployment> deploymentResolver,
 String configurationName,
 org.apache.activemq.artemis.core.config.impl.SecurityConfiguration configuration)

Method Details

authenticate

public Subject authenticate(String user,
 String password,
 org.apache.activemq.artemis.spi.core.protocol.RemotingConnection remotingConnection,
 String securityDomain)

Specified by:

authenticate in interface org.apache.activemq.artemis.spi.core.security.ActiveMQSecurityManager5

Overrides:

authenticate in class org.apache.activemq.artemis.spi.core.security.ActiveMQJAASSecurityManager

getAuthenticatedSubject

protected Subject getAuthenticatedSubject(String user,
 String password,
 org.apache.activemq.artemis.spi.core.protocol.RemotingConnection remotingConnection,
 String securityDomain)
                                   throws LoginException

Throws:

LoginException

authorize

public boolean authorize(Subject subject,
 Set<org.apache.activemq.artemis.core.security.Role> roles,
 org.apache.activemq.artemis.core.security.CheckType checkType,
 String address)

Specified by:

authorize in interface org.apache.activemq.artemis.spi.core.security.ActiveMQSecurityManager5

Overrides:

authorize in class org.apache.activemq.artemis.spi.core.security.ActiveMQJAASSecurityManager

verifyRights

protected boolean verifyRights(Subject subject,
 String address,
 boolean isWrite)